CVEs published November 9, 2025
7 CVEs were published on November 9, 2025: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 4
- Low
- 1
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Linux
- 2
- EverShop · @evershop/evershop
- 1
- OpenClinica Community Edition
- 1
- qianfox FoxCMS
- 1
- TOZED ZLT T10
- 1
- yungifez Skuul School Management System · yungifez/skuul
- 1
Medium, low and unrated 7
- CVE-2025-12921OpenClinica Community Edition CRF Data Import ImportCRFData xml injectionOpenClinica Community Edition
- CVE-2025-12920qianfox FoxCMS Product.php edit cross site scriptingqianfox FoxCMS
- CVE-2025-12919EverShop Order Order.resolvers.js resource injectionEverShop · @evershop/evershop
- CVE-2025-12918yungifez Skuul School Management System View Fee Invoice fee-invoices resource injectionyungifez Skuul School Management System · yungifez/skuul
- CVE-2025-12917TOZED ZLT T10 Reboot proc_post denial of serviceTOZED ZLT T10
- CVE-2025-40109crypto: rng - Ensure set_ent is always presentLinux
- CVE-2025-40108serial: qcom-geni: Fix blocked taskLinux